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Abstract. Relativistic causality has dramatic consequences on the measura- 
bility of nonlocal variables and poses the fundamental question of whether it is 
physically meaningful to speak about the value of nonlocal variables at a particu- 
lar time. Recent work has shown that by weakening the role of the measurement 
in preparing eigenstates of the variable it is in fact possible to measure all nonlocal 
observables instantaneously by exploiting entanglement. However, for these mea- 
surement schemes to succeed with certainty an infinite amount of entanglement 
must be distributed initially and all this entanglement is necessarily consumed. 
In this work we sharpen the characterisation of instantaneous nonlocal measure- 
ments by explicitly devising schemes in which only a finite amount of the initially 
distributed entanglement is ever utilised. This enables us to determine an upper 
bound to the average consumption for the most general cases of nonlocal mea- 
surements. This includes the tasks of state verification, where the measurement 
verifies if the system is in a given state, and verification measurements of a general 
set of eigenstates of an observable. Despite its finiteness the growth of entangle- 
ment consumption is found to display an extremely unfavourable exponential of 
an exponential scaling with either the number of qubits needed to contain the 
Schmidt rank of the target state or total number of qubits in the system for an 
operator measurement. This scaling is seen to be a consequence of the combina- 
tion of the generic exponential scaling of unitary decompositions combined with 
the highly recursive structure of our scheme required to overcome the no-signalling 
constraint of relativistic causality. 
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1. Introduction 

The formal compatibility of quantum mechanics with special relativity is highly 
nontrivial [l] and is in many ways quite miraculous [2]. Perhaps the most well 
known difficulty in combining these formalisms arises from the so-called "collapse" 
of a quantum state associated with the measurement process, and in particular 
the instantaneity of this change. This problem is highlighted in its most simple 
form by considering two observers, Alice and Bob, who are spacelike separated. 
Conventional wisdom holds that any self-adjoint operator that can be defined for 
Alice and Bob's joint system is measurable in principle [3]. But in fact, most such 
operators represent nonlocal variables, meaning that they cannot be written in the 
form where A and B are self-adjoint operators acting on Alice and Bob's local 

Hilbert spaces, respectively. Early on it was recognised that if such nonlocal variables 
were instantaneously measurable, in the standard sense in some Lorentz frame, then 
violations of relativistic causality arise (see Fig 1 for a description of this effect for an 
ideal measurements on two separated spin-^ particles). In 1931 Landau and Peierls |4] 
claimed that this observation implied, quite generally, the impossibility of measuring 
any nonlocal variable at a well-defined time, and even went so far as to postulate a new 
uncertainty principle to this effect. Thus a common consensus arose that it only made 
sense to speak of local variables as observables in relativistic quantum mechanics. 

It was only in 1980 that this conjecture was finally refuted by Aharonov and 
Albert [5l [6] who explicitly constructed a scheme for measuring certain nonlocal 
variables (e.g. the Bell operator; see Sec. [2j) instantaneously without contradicting 
causality. In contrast to previous studies their measurement scheme expHcitly 
introduced entangled probes whose quantum correlations enable nonlocal properties 
of the system to become correlated to local properties of the measuring device. This 
means that by combining the correlated local outcomes of the two observers, at 
some point in the future when their light cones have intersected, the final nonlocal 
measurement result can be revealed. Their discovery had serious implications for the 
notion of states and observables in relativistic quantum mechanics. It immediately 
disproved the previously held covariant state reduction postulate [7] whose validity 
was dependent on only local variables being measurable. It also showed that no 
covariant succession of states at a given time can be associated to the system since 
observers in different Lorentz frames will have confiicting accounts of the reduction 
process which cannot be reconciled within any single covariant state history. This 
far-reaching conclusion culminated in their proposing that to take account of changes 
to a state vector, induced by local or nonlocal measurement processes, it is required 
that the wavefunction ceases being a function of spacetime and instead becomes a 
functional on the set of spacelike hypersurfaces [HI [9] . 

Further work [10] then detailed explicit methods for measuring nonlocal variables 
such diS A-\- B and modular sums like {A + B) mod a, where a is a desired eigenvalue. 
It was later proven in generality by Popescu and Vaidman [11 that any conceivable 
measurement requires the erasure of local information (within the relevant degrees 
of freedom) in order to be compatible with causality. For a standard non-demolition 
measurement, to satisfy this additional requirement there is a dramatic restriction 
on what is measurable. For the case of two spin-^ particles causality limits the 
measurability of operators to those with either trivial direct product eigenstates or 
maximally entangled Bell states. The measurability of the latter is permitted because 
the reduced density matrix of either spin is always proportional to the unit matrix. 
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Figure 1. (a) In a scenario envisaged by Landau and Peierls a particle is initially 
localized at a point A and is subject to an ideal momentum measurement at some 
later time t = to. The effect of this measurement is to instantaneously collapse 
the particles wavefunction into a momentum eigenstate which subsequently 
redistributes the particles probability amplitude throughout all space. There is 
then a non-zero probability of finding the particle at a location B which is spacelike 
separated from A. (b) A simpler formulation of this causality violation can be 
framed using spin--| particles (see Sec. [2]). Here we consider a device which can 
perform an instantaneous ideal measurement of the magnitude of the total spin 
squared J'^ = ^^^x y zi^k + '^k^^ spacelike separated spins. Dependent 

on the local outcomes a and b via some function / the state after the measurement 
will be projected into one with a well defined value = f{a,b). (c) If such a 
measuring device exists it would violate relativistic causality. Suppose Alice and 
Bob prepare a state | t}A I t}s in the distant past and arrange to measure at 
time to. If just prior to the measurement at time to — e Alice flips her spin 
then a measurement of by Bob just after the measurement at time to -\- e 
will yield 'X and 4- with equal probability. Since the time interval 2e can be made 
arbitrarily small Alice can use the measurement to send superluminal signals. 



A surprising consequence of this result is that even nonlocal variables with product 
eigenstates (see Eq. (j8j) in Sec. 16. ip are not measurable [12 showing further that 
standard quantum measurements can be non-separable in a way not entirely captured 
by the notion of entanglemenlU. The information erasure theorem [11 indicates that 
causal measurement schemes for almost all nonlocal variables cannot be a standard 
von-Neumann measurement. Such measurements leave the system undisturbed if 
it was in an eigenstate of the observable before the measurement and play a dual 
role of both observing a quantity and preparing the system in an eigenstate of 
the corresponding observable [1^ It is now recognised that this framework, 

which was the basis of Landau and Peierls conjecture, is too restrictive to decide 
whether a nonlocal variable attains the status of a physical observable. Instead an 
operators measurability should be determined in a broader paradigm of verification 
measurements [161 [III HE]- A verification measurement can confirm with certainty 
whether the system is in an eigenstate of an observable at a given time, but does not 
necessarily leave the system in an eigenstate after it is completed. These measurements 
are therefore destructive and non-repeat able. 

Recent work in the context of gauge theories has further highlighted the 
fundamental implications of how measurability is defined ^9\. In particular for 
gauge theories, which are used to describe all elementary particles, it is common 
to characterise gauge field configurations by Wilson loop operator's. These manifestly 
nonlocal quantities are taken to be basic observables in gauge theory. Yet it was 



I This situation is in contrast to the usual nonlocality without entanglement scenario where the 
constraint is on quantum resources and unlimited classical communication is assumed [13] . 
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shown that the non-demohtion measurement of spacehke Wilson loops in a relativistic 
non-Abelian gauge theory violates causality, and that instead only verification 
measurements are possible [19 . From a different perspective it has also been 
shown recently that the use of additional ancillary resources can dramatically alter 
the properties of nonlocal measurements, for example by revealing Bell-inequality 
violations in delocalised single-particle mode entanglement that would otherwise be 
prohibited by super-selection rules [2Qj [2T1 [22] . Indeed by moving both to verification 
measurements and exploiting ancilla it has been found that there are no causal 
restrictions on what variables can be measured. Firstly, using methods devised for 
remote probabilistic rotations [23] it was shown that all observables of two spin- 
^ particles can be measured instantaneously [16]. Secondly, a method based on 
teleportation [23^ was devised which demonstrates the instantaneous measurability 
of all observables for multipartite systems of arbitrary dimension J3 [25]. These 
studies have therefore answered affirmatively that the instantaneous measurement of 
all nonlocal variable^ can be achieved without contradicting quantum mechanics and 
causality. Thus in principle all nonlocal variables are valid physical observables and 
so within this framework the conventional wisdom is reestablished. 

A critical ingredient in these measurement schemes is entanglement. However, 
since the main aim of those schemes [TBI [17] was disproving causal restrictions they 
were not concerned with limiting the amount of entanglement consumed. As a result 
to guarantee success in the most general cases these schemes require an unlimited 
supply of entanglement to be initially distributed between Alice and Bob, and all of 
this entanglement is necessarily consumed. Here we go beyond this by systematically 
addressing the latter issue, namely the entanglement consumption. Firstly we 
explicitly devise a scheme, which significantly optimizes that by Vaidman in [17], 
where only a finite amount of the initial entanglement is ever consumed on average. 
This enables us to sharpen the charaterization of instantaneous nonlocal measurements 
by quantifying the cost of nonlocal measurement tasks. Specifically we determine an 
upper bound to the average consumption for state verification, where the measurement 
verifies if the system is in a given state, and for the verification measurement of a 
general set of eigenstates of an observable. Secondly, it is straightforward to show 
from our scheme that by only allowing a finite amount of the initial entanglement, 
in addition to a finite average consumption, the measurement can still proceed with 
certainty but will suffer a bounded error on its statistics. 

The structure of this paper is as follows. In Sec. [2] we layout the framework we 
shall use in this study and describe the approach to nonlocal measurements taken with 
specific attention paid to the Bell measurement example. This is followed in Sec. [3] 
by a brief review of teleportation as an ingredient in instantaneous protocols and a 
outline of the pioneering work by Vaidman [17]. The main component of this work, 
what we call rotation chains^ is introduced in Sec. [H In this section the protocol for a 
single chain is described in detail and is shown to have a finite average entanglement 
consumption. In addition it is explained how these chains can be concatenated 
to implement arbitrarily complex nonlocal unitaries and the scaling of the average 
entanglement consumption with the number of chains is also found. The remainder of 
the paper then utilises these tools for several nonlocal measurement problems. Firstly, 
in Sec.[5]it is applied to state verification measurements starting with an arbitrary two- 

§ One caveat to this, which apphes to this work as well, are variables related to fermionic degrees of 
freedom that are spatially delocalised [T7| [26] . 
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qubit state before generalising to an arbitrary finite-sized bipartite multi-qubit system 
where the scahng of entanglement consumption with the Schmidt rank of target state 
is obtained. Secondly, the state verification scheme is expanded in Sec. [6] to enable 
the simultaneous verification of any set of orthogonal eigenstates constituting a full 
operator measurement. Again two-qubit observables are considered in detail, followed 
by a bipartite multi-qubit system where the scaling in entanglement consumption with 
the system size is determined. Finally in Sec. [3 we conclude and comment on open 
problems for future work. 

2. Framework 

Let us now describe in more detail the framework used within this study. We 
shall exclusively consider both the principal system and measuring probes as being 
composed of two distinguishable parts built up from spin-^ particles (qubits) and each 
localized in different regions of space occupied by Alice and Bob which are spacelike 
separated. While this is not the most general scenario it has proven to be particularly 
well suited for investigating quantum measurements and non- locality [27l [28l [TT] . 
The local regions themselves are assumed to be small enough to neglect causality 
restrictions within them, but large enough compared to the Compton wavelength to 
neglect relativistic effects such as pair creation. Relativistic causality then enters due 
to the scale of the distances between the two parts of the system and otherwise the 
formalism of non-relativistic quantum mechanics can be used. Within this setting we 
shall consider measurement schemes which are localizabl^ quantum operations. This 
means that they can be composed of arbitrary local operations between the local parts 
of the system (we assume all local operations are equally easy to apply) and entangled 
resources which were shared prior to the measurement, but do not utilise any classical 
communication. Localizable operations are manifestly causal, although curiously not 
all causal operations are themselves localizable [29 . 

In general a nonlocal measurement requires previously arranged cooperative 
actions of Alice and Bob which can be broken into three steps. In the first step, 
which will be seen to be essential, suitably entangled ancilla systems must be prepared 
and distributed to the parties. Second, each party performs a local operation, such 
as unitaries and ideal (irreversible) projective measurements, on their part of the 
principal system and entangled ancillae. Third, the classical information extracted by 
both parties in the second step is transmitted to a central location C where the readout 
of the result is completecfl. These steps are summarised in Fig. [2fa). Since the local 
operations which act on parts of the system and measuring device in step two can 
proceed without waiting or knowing the outcomes of actions performed by the other 
party they can in principle be performed in an arbitrarily small time. Thus when we 
speak of an "instantaneous measurement" we are referring to the particular Lorentz 
frame where both observers performed their actions at time to. Since we are interested 
in examining questions of causality, as opposed to covariance, we shall continue to use 

II Following earlier work [29] the relevance of our results for quantum field theory should be 
understood as applying to the idealization that the external probe variables are "heavy" with rapidly 
decaying correlations, while the field variables are "light" . In this situation the notion of localizability, 
which requires a strict separation between field and probe, is credible. 

% A more general scenario can permit quantum information to be transmitted. This would enable 
so called exchange measurements [lOj to occur where the principal system is swapped into the 
measuring device, essentially freezing its state, and is then later measured at C. In this case that the 
measurement has not really occurred until the last step and its outcome did not exist at time to- 
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Figure 2. (a) A depiction of the type of measurement scheme considered in this 
work. The scheme intends to measure a property, at a given time to, of a system 
composed of two spacehke separated parts at regions A and B. To do so measuring 
probes are prepared some time earher, possibly in an entangled state (signified 
by the wiggly line), and transported to the two locations A and B. Once the 
probes arrive at these locations at time to local operations are performed between 
the parts of the system and probe at each region and resulting in local classical 
information. This information is then transmitted to a location C where the 
future lightcones of A and B intersect. The overall outcome of the instantaneous 
nonlocal measurement is then deduced at C, but pertains to the system at time ^o- 
(b) As an example of such a measurement scheme a circuit diagram is shown for 
the demolition nonlocal measurement of the Bell operator on two qubits utilizing 
one maximally entangled ancilla | ^o}- The vertical dashed line delineates the 
two regions and highlights that all operations in this circuit are local. In this 
example both local operations correspond to a Bell measurement. To aid the 
explanation of this measurement given in Sec. [3] we show on the lefthand side a 
Bell measurement composed of a unitary and single-qubit measurements [15] 
whose outcomes together give a binary encoding of the overall {0, 1, 2, 3} result. 
For subsequent diagrams we shall simply denote local Bell measurements by a 
"BM" box with four outcomes and not be concerned with its internals, be them a 
joint measurement projecting on to local Bell states or the single-qubit form given 
above. The global outcome for the instantaneous nonlocal Bell measurement is 
then designated by the addition modulo 4 of the local results c = a b. 



the terminology of quantum states and confine our description to this Lorentz frame. 
At the end of step two both Ahce and Bob are in possession of a set of indehble 
local classical bits. In accordance with the information erasure theorem [TJ these 
local outcomes can only specify which eigenvalue of the nonlocal variable the system 
had at time to once they are combined later at a point C in the future light cones of 
both observers. As a consequence although the measurement was instantaneous and 
completed in step two at time to the result is not necessarily known instantaneously 
by either party and can only be reconstructed much later at step three. Despite 
these features nonlocal verification measurements retain the usual requirements that 
(i) when the system is in an eigenstate of the observable the outcome corresponding 
to that eigenstate is produced with certainty, and the linearity of quantum mechanics 
then ensures that (ii) for a general superposition of eigenstates the corresponding 
eigenvalues are observed with the appropriate quantum probabilities. 

The features of a nonlocal measurement just discussed are best outlined by a 
concrete example. In Fig. El^b) a nonlocal demolition measuring scheme for the Bell 
operator of two qubits is shown. The Bell operator possesses the non-degenerate 
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maximally entangled eigenstates 

l*o) = ^(|0)^|0)5 + |l)^|l)5), 

I*i) = ;^(|o)^|i)b + |i)^|o)b) 

|$2) = ^(|0)^|0)5-|l)^|l)s), 

|$3) = ^(|0)^|l)s-|l)^|0)^). 

For the measurement scheme shown in Fig. EJb) a pair of ancilla qubits in the 
state I $o) have been previously distributed. Such maximally entangled pairs will 
form the resource for all of the schemes studied in this work. The measurement of 
the Bell operator then proceeds by each party performing a local Bell measurement 
between their half of the system and ancilla pair. Since it is a demolition verification 
measurement once it is completed the local parts of the system and ancilla are left 
in direct product states with equal unbiased probabilities. Thus in accordance with 
causality local information in the relevant degrees of freedom is erased and the local 
reduced density matrix is maximally mixed at all times. As a result the local outcomes 
a, b G {0, 1, 2, 3} reveal no information about the global outcome in isolation. Instead 
they are correlated nonlocally with the final outcome being c = a b where is 
modulo 4 addition. We shall explain how this measurement scheme works shortly in 
Sec. [3l While this demolition Bell measurement scheme shares many features with 
the more general schemes about to be introduced we mention for completeness that, 
with the use of an additional entangled pair and a suitable modification of the circuit 
in Fig. Efb), a non-demolition scheme can be devised O [6l [14]. The information 
erasure theorem [11 proves that this is the only nonlocal variable of two qubits which 
possesses a non-demolition measurement scheme because the reduced density matrix 
of any of its eigenstates for either party is maximally mixed. 

3. Teleportation and instantaneous nonlocal unitaries 

To generalise the Bell measurement just described to a more general nonlocal 
measurement scheme it turns out to be very convenient to describe the local operations 
performed by both parties in terms of the instantaneous part of the teleportation 
protocol [24 . In this section we shall describe teleportation within the framework 
outlined above and also detail earlier work by Vaidman [17^ which demonstrated how, 
through a prearranged recursive structure, it enables the instantaneous measurement 
of any nonlocal variable. 

3.1. Teleportation 

As is well known the teleportation [24 of an arbitrary state of d qubits | ^) can be 
accomplished by local operations and classical communication if Alice and Bob share 
one half of d maximally entangled two-qubit states | ^o)- This follows from the identity 

I '^)a,A,-A, ® I *0)„,fc, ® I *0)„,fc, ® • • • ® I $o)„,fc, 
m 
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Figure 3. A schematic of a nonlocal verification measurement scheme for any 
observable on 2d qubits whose complete set of eigenstates are locally equivalent to 
stabiliser states. The unitaries and Vg are arbitrary and account for the local 
equivalence. The unitary U G *S is a stabiliser and is applied to the system once 
it has been localised by teleportation. The entire set of qubit at Alice's location 
can be measured in the z-axis to complete the scheme. Generalisation to unequal 
distributions of qubits and multi-party scenarios is straightforward. 



Here we have designated a tensor product of Pauli operator^ over the system of d 
qubits as = cTa^ (8) o-g,^ (8) • • • (8) cTa^, where a = (ai, a2, • • • , a^^) is an dimensional 
vector of outcomes a^ G {0,1,2,3} and we numericahy index at with ctq = 1 while 
1 x^2 z and 3 y. Teleportation is then achieved by Alice measuring each pair 
of qubits Aj^aj in the Bell basis | with the outcome fixing the element a^ in a. 
Overall this collapses Bob's d qubits to the state | ^), modulo a Pauli distortion 
determined by Alice's equiprobable measurement outcomes a. The full teleportation 
protocol is finished by Alice transmitting 2d classical bits to Bob specifying the vector 
of outcomes a so he can remove the Pauli distortion and recover | ^) with certainty. 
Since we will be exclusively concerned with instantaneous operations this last step, 
which necessarily takes a finite amount of time to implement, will never be performed 
and we shall from now on use the term teleportation to describe the Bell measurement 
part only. The cost of instantaneity is the unavoidable presence of the equiprobable 
Pauli distortion which due to the identity 

a 

preserves relativistic causality by completely scrabbling the reduced density matrix of 
the local system. As we shall see despite the distortion teleportation can nonetheless 
be exploited to achieve instantaneous non-local operations. 

The simple instantaneous Bell measurement in fact already highlights some 
essential properties of nonlocal measurements and readily allows us to identify a 
bipartite multi-qubit generalisation. Specifically in Fig. [2fb) we can interpret Bob's 
local Bell measurement (on the right) as a teleportation of his half of the system 
to Alice yielding an outcome b. In a step which will be shared by all schemes in 

+ We will refer to tensor products of Pauli operators as a Pauli string operator or a simply as a Pauli 
distortion depending on the context. 
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this work he has locahsed their initiahy distributed system. Ahce can then attempt 
to apply a unitary which maps the locahy unmeasurable set of eigenstates into the 
triviahy measurable direct product set | 0) | 0) , | 0) | 1) , 1 1) | 0) and | 1) | 1). Were Alice 
to apply a general unitary U its effect would be confounded by the Pauli distortion (Jb 
on her receiving qubit unknown to her. For a Bell measurement the required unitary 
Ub, depicted in Fig. Efb), is a member of a special class of unitaries in this regard. 
Specifically, for a multi-qubit system with a distortion ah there are a set of unitaries 
U e S which satisfy Uah = (Jh'U ^ in which a Pauli distortion (Jb can be propagated 
through them at the expense of possibly changing to a different Pauli distortion ab'. 
This set of unitaries S are called stabilisers and can be constructed, up to a global 
phase, from quantum circuits containing only CNOT, Hadamard and phase gates [15]. 

Since both the CNOT gate and the rotation Ry{—7T/2) = ex.-p{i7Tay / 4) are 
stabilisers the effect of Ub{l cTb) in the Bell measurement is summarised as Ub, 
(1 cFx)Ub^ {o'x cFz)Uh^ and {cf^ ^ o-y)Ub for b = (0,1,2,3), respectively. The 
scheme terminates, once Ub is applied, with a measurement of both qubits in the 
computational basis (i.e. z-axis). Since Pauli distortions simply map direct product 
states between themselves once (Tb has been propagated through Ub it induces a 
benign, but causality preserving, non-deterministic mapping between the Bell and 
direct product bases. This final measurement in the fixed 2;-axis is therefore certain 
to complete the scheme. 

With this observation we can immediately construct a nonlocal instantaneous 
verification measurement for any operators on any number of qubits whose eigenstates 
are all stabiliser states (or states which are locally equivalent to them). In addition to 
Bell states this class includes some of the most well studied multi-qubit entangled 
states such as the Greenberger-Horne-Zeilinger state [30], cluster states [31] [32] 
and more generally graph states [33]. The entanglement consumption of stabiliser 
measurements, analogous to the Bell measurement, is then simply the minimum 
number of ebits needed to localise the system. A schematic diagram of a stabiliser 
measurement protocol is given in Fig. [H For the most general nonlocal measurements 
the unitary U required will not be a stabiliser. Our goal is therefore to devise a scheme 
which, after the system has been localised by teleportation, enables U to be applied 
while still propagating any Pauli distortions to the end. As we shall see for arbitrary 
unitaries U this is a highly nontrivial and expensive task. 

3.2. The Vaidman scheme 

The general nonlocal measurement scheme devised by Vaidman [TT starts in the same 
way as Bell measurement in Fig.[2]^b) by Bob teleporting his half of the system to Alice. 
Without any loss of generality we focus on a system of two qubits. Since Alice and 
Bob's aim is to measure some nonlocal variable O with eigenstates | oi) , | 02) , | 03) 
and I 04) they devise a unitary U transformation which maps these eigenstates to the 
measurable direct product basis as 

f/|oi) = |0)|0), f/|o2) = |0)|l), 

f/|03> = |1>|0), f/|04) = |l)|l). 

Given the system was initially in that state | ^)^^ the state of Alice's qubit A and the 
ancilla qubit ai, representing the receiving qubit of the teleportation from Bob, is now 
in a state dbi | ^) Aa-i- ^^^^ ^^^P scheme is for Alice to simply apply U to 

qubits A and ai. With a probability of 1/4 Bob's teleportation will be non-distorting 
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Figure 4. (a) At the start of the Vaidman scheme Bob teleports his half of 
the system to Ahce who then apphes the unitary U between her half and the 
teleported qubit. Since Alice does not know whether this action was successful 
she teleports the entire system back to Bob. (b) A cluster mentioned in the 
main text. Given Bob has a state V;_i | ^} with some accumulative unitary Vi^i 
applied to it he can teleport the entire system to Alice who can apply a correction 
Ui and teleport it back. If Bob's teleportation is non-distorting so b = = 
then Alice has successfully corrected the returned state, (c) A tree diagram of the 
Vaidman scheme. The root of the tree is the initial step of the scheme depicted 
in (a). The hashed boxes spawning from the root represent clusters identical to 
that depicted in (b). Depending on his teleportation outcomes Bob traverses the 
tree structure utilising only specific path of clusters corresponding to his history 
of outcomes (e.g. illustrated by the arrow). See the main text for a more detailed 
description of the scheme. 



with bi = and Alice would have successfully mapped the eigenstates of O to the 
measurable direct product basis. For the other three distortions the resulting unitaries 
Uax, U(jy and UcTz will not in general map the eigenstates to the direct product basis 
(unless of course U happens to be a stabiliser). Since Alice has no knowledge of bi 
she has no choice but to teleport the entire system of two qubit s back to Bob. For 
brevity we shall from now on call a complete teleportation of the system, regardless 
of the number qubits, a channel. This initial step of the scheme is shown in Fig.lU^a). 

At Bob's side he expects the return of the system and on the fortuitous occasion 
that his first teleportation gave bi = he can be assured that Alice successfully 
applied U to leaving his two ancilla qubits 62 and 63 in the state daias^ I ^)h2h3- 
Just as with the Bell measurement scheme the final mapping is to the trivial direct 
product basis modulo a subsequent Pauli distortion. Thus, despite the fact that Bob 
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has no knowledge of the outcomes ai and a2 he can go ahead and immediately measure 
the qubits in the z-axis completing the verification measurement of O. For the cases 
where bi 7^ Bob knows that Alice did not apply U in isolation. To allow Alice 
the opportunity to correct this mistake the scheme from here on adopts a tree-like 
structure. The root of this tree is the first teleportation just described. Above this 
there are now three branches each labelled by the possible distorting values bi might 
take. Each branch leads to a cluster whose structure is illustrated in Fig. IH^b). A 
cluster simply contains a teleportation channel for Bob to send back the system to 
Alice and a corresponding channel for Alice to return it. Depending on the actual 
value of bi Bob traverses the corresponding branch of the tree and sends the system 
back to Alice via the channel in that branches cluster. He will never act on clusters 
in any other branches of the scheme. 

At the receiving end of the incoming channel in each of the three clusters Alice 
will have, if the cluster was used, a state crb2b3<^aia2^<^bi | She can now infer the 
value of bi from the cluster's label. Under the assumption that Bob's teleportation 
in that cluster was non-distorting, so b2 = bs = 0, she can devise a correction unitary 
/7i(bi), dependent on bi, obeying 

^l(bl)craia2^crb, = U. 

Thus, with a probability of 1/16 Alice will undo the previous unitary and distortions 
and map the eigenstates of O to the direct product basis. To complete the cluster 
she teleports the resulting two qubit system back to Bob via a corresponding return 
channel as shown in Fig.HJ^b). Since Alice does not know which, if any, of the clusters 
were used she must perform this bi dependent correction on all three clusters. 

The situation for Bob is now identical to the first round but with a smaller 
probability of success. If b2 = ba = then as before he can immediately measure the 
incoming qubits on the cluster he used and complete the measurement. For the other 
fifteen possible distorting outcomes Bob knows Alice's correction will have failed. To 
overcome this failure the same strategy is applied. Each of the clusters in the first 
level of the tree spawn fifteen new branches, one for each possible distortion by Bob's 
previous teleportation, again leading to a new cluster. From his current position in 
the tree Bob now traverses the appropriate branch dependent on b2,b3 and teleports 
the system back to Alice through the channel in that branch's cluster. For Alice the 
situation is now that she has 45 incoming channels to operate on since she has no 
knowledge of Bob's actual path through the tree. For each cluster in this second level 
she can continue to guarantee a 1/16 chance of success by again devising a unitary 
/72(bi,b2,b3) obeying 

^2(bl,b2,b3)cra4a5^l(bl)crb2b3^aia2^^bi = U. 

The labels on the tree structure provide Alice with a complete history of distortions 
which Bob would have induced had he traversed those branches and this is essential 
for her to be able to construct a correction. The only knowledge Alice lacks is the 
nature of Bob's last teleportation and her correction only works on the assumption 
that it is non-distorting. The scheme therefore continues in the same way following 
an exponentially growing tree structure, depicted in Fig. HJ^c). The measurement is 
completed once Bob has performed a non-distorting teleportation. 

So long as this scheme is repeated to infinite depth it can, quite remarkably, 
ensure that at some point along the path traversed by Bob the unitary U is applied 
with certainty, modulo some proceeding Pauli distortions. At this termination point 
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Bob can then complete the measurement. The cost of achieving this task though 
is unbounded. In particular the division of labour is highly skewed since Alice 
must operate on all branches, whose number grows exponentially with the level, and 
unlike Bob has no termination condition. This means that the infinite amount of 
entanglement which was initially distributed to form the scheme's tree structure is 
necessarily consumed without exception. In return for this effort, however, Alice has 
complete control of the unitary U eventually implemented and need only decide what it 
is immediately before she starts her actions. The scheme generalises straightforwardly 
for d qubits but with a probability of success 4"^^ at each level and 4^ — 1 new branches 
spawning to the next level. Additionally since Alice does all the correction work the 
scheme can be readily adapted to work with any number of parties [17J. This is a 
property shared with stabiliser measurements since there only one party is needed 
to perform the stabiliser circuit. The Vaidman scheme provides a constructive proof 
that an instantaneous measurement scheme, which is guaranteed to succeed, can be 
devised for any nonlocal variable and nonetheless be compatible with both quantum 
mechanics and causality. For the remainder of this work we describe a scheme, based 
on a simple but significant modification of Vaidman's, that can similarly be used to 
measure any nonlocal variable and guaranteed to succeed, but consumes only a finite 
amount of entanglement on average. 

4. Finite consumption scheme 

The essential adjustment we make to Vaidman's scheme is that rather than attempting 
to apply the desired unitary U directly at each step we instead decompose U 
into a sequence of simpler unitaries and attempt to apply these individually in 
separate rounds of the scheme. These simpler unitaries are Pauli rotations Rj{0) = 
exp(— z^crj/2) = cos(^6>)l — ism{^6)aj involving the exponential of a Pauli string 
operator aj, introduced earlier in Sec. 13. If by an angle 0. In this section we 
will concentrate on implementing Pauli rotations and give explicit examples of 
decomposing general unitaries U in terms of them later when we discuss specific 
applications in Sec. [5] and Sec. [6l Despite Pauli rotations not being stabilisers (aside 
from when = 7r/2) they do have extremely advantageous properties with respect to 
Pauli distortions. As we shall now describe this can be exploited to yield a scheme 
where both parties have local termination conditions and only a finite amount of the 
initial entanglement is ever consumed. 

4-1- Pauli rotation chain 

The basic component of all our measurement schemes is a rotation chain which applies 
a single Pauli rotation Rj{0) designated by an angle and a nontrivial vector j 
specifying the Pauli string known to both parties. A rotation chain is composed 
of a sequence of teleportation channels in which the entire system of d qubits is 
teleported together back and forth in an alternating direction between Alice and Bob, 
as depicted in Fig. [5l The starting point of a rotation chain is the familiar situation 
where one party, say Alice, possesses the entire system. Initially, when the system 
was distributed, it was in some state | ^), however, the actual state of the system at 
Alice's location contains a Pauli distortion <Jbi | ip) defined by a vector bi known only 
to Bob. This distortion is taken to have arisen from earlier teleportations (such as 
previous rotation chains as described shortly in Sec. l4.2p and so we take all 4^ possible 
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Figure 5. A schematic of a Pauli rotation chain used to implement a unitary 
Rj(0). As a result of previous teleportations Alice possesses the entire system, 
but in a state a\^^ \ where bi is known only to Bob. As a result she cannot be 
certain that she has applied Rj(0) directly to the state | ^}. The scheme depicted 
shows that by exploiting a sequence of directed teleportation channels the entire 
system can be bounced back and forth between Alice and Bob such that there 
is a probability of ^ at each step that either party possesses a state Rj (6) \ ^) 
modulo a proceeding Pauli distortion. This strategy is a bipartite multi-qubit 
generalization of a similar single-qubit scheme presented in [17| . See the main 
text for a more detailed description of the scheme. 



vectors bi as equiprobabl^. As we have seen the presence of this distortion generahy 
results in 4^ — 1 different errors if Ahce tried to apply the complete unitary U directly. 
In a rotation chain Alice instead applies i?j {0) and only one of two possibilities occur 

o ^z^w I m - I ^b.i^jW I ^) , for bi G c(j) 
RAOW. I ^) - I I ^) , for b, G c(j) • 

Since j ^ (0, 0, • • • , 0), and so never designates a string of identity operators, we denote 
here c(j) as the set of 4^/2 vectors specifying Pauli strings which commute with <jj, 
while c(j) is the other half of the total set of vectors which anti-commute with aj. In 
the latter case propagation of the rotation through the distortion results in a sign 
change. Thus, Alice has a probability of ^, independent on (i, to have implemented 
the correct rotation on the initial state. Moreover the only error she can make is to 
rotate in the wrong direction. Since she has no knowledge of her success she must 
teleport the entire system back to Bob via the first channel shared between them. 
At Bob's side he immediately applies the unitary (Jbi, corresponding to the 

* For Bob's initial teleportation which localises the system (7\y^ has zero elements for all Alice's qubits 
and so is only equiprobable over a subset of 4^/^ strings. However, since Alice will attempt to apply 
a Pauli rotation on the entire system the effect of this type of (7\^^ is identical. 
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initial distortion, to the incoming qubits. If bi G c(j) then his initial distortion 
was commuting and the incoming qubits will be in a state crbiCraiCrbii^j(^) | where 
(Jai is a new distortion induced by Alice's teleportation. Bob therefore knows that 
the incoming qubits have had, modulo a subsequent distortion, the correct rotation 
applied to their initial state. He then keeps these qubits ready for further operations 
(see Sec. 14. 2p or a measurement. His actions for this chain are then terminated. If 
bi G c(j) then his initial distortion was anti-commuting and he knows that Alice 
performed Rj{—0) instead. Following a strategy outlined in [34] Bob can attempt to 
correct this, under a previously agreed assumption that ai is commuting, by applying a 
new double an^/e rotation Rj{20) to the qubits. This gives Rj{20)ahiO-aiO-hiRj{—0) \ ^) 
which is the desired state only if ai G c(j) is a commuting distortion. To overcome 
his lack of knowledge regarding ai Bob teleports all d qubit back to Alice via the next 
channel in the chain. 

The situation for Alice is now identical to Bob's just described. She immediately 
applies (Jai to the incoming qubits. If ai G c(j) she can be certain that, if it was 
necessary. Bob succeeded in correcting her rotation. In this case the state of her 
system is o-aiO-h2O'hiO'aiO'hiRj{0) \ where <Jb2 is a new distortion induced by Bob's 
teleportation back. This final state is of the required form so she keeps the qubits and 
terminates her actions in this chain. If ai G c(j) Bob's rotation causes an accumulative 
error of Rj{—30). Alice attempts to correct this, again under the assumption that his 
last distortion (Jbs is commuting, by applying another double angle rotation Rj{4:0). 
Notice that she does not need to assume or know anything about earlier distortions 
by Bob, such as dbi , since it appears twice in the accumulative distortion. She then 
teleports the qubits back via the next channel and the scheme continues. A schematic 
of these steps in the rotation chain scheme are given in Fig. [5l 

Notice that both Alice and Bob have a probability of ^ of implementing the 
jointly agreed rotation at each step and can both determine their success by local 
outcomes. Since the actions of both parties terminate there is a zero probability that 
the chain continues indefinitely and so only a finite amount of the initial entanglement 
is ever consumed. A disadvantage of joint termination is that as a rotation chain 
proceeds both parties lose knowledge of where the appropriately transformed qubits 
finally reside. Instead the actual pathway taken by the system is only reconstructed 
by the combination of Alice and Bob's local classical records. The manner in which 
the rotation chain deals with the Pauli distortions caused by teleportation is very 
reminiscent of one-way quantum computing [HI [32]. There the indeterminism of 
single qubit measurements used to drive the computation produces Pauli distortions 
at intermediate stages which, via minor adjustments in the subsequent operations, 
are propagated to the end of the computation. Their effect is then to simply alter 
the interpretation of the final output measurements. If further rotations are required 
then, as we shall show in the next section, distortions can continue to be propagated 
to the end. 

4.2. Concatenation of rotation chains 

Let us now suppose Alice and Bob wish to apply a further rotation i^k(0 (i-qubit 
state Rj{0) | ^). To do this they can use a second rotation chain which applies i^k(0 
to the output from the first Rj{0). However, since the first rotation chain has multiple 
opportunities of terminating successfully on both Alice and Bob's side a second chain 
must be available separately for each of these exit points to cover all eventualities. 
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Figure 6. A schematic of the concatenation of two Pauh rotation chains used to 
implement a unitary R\^{^)Rj(0) modulo a proceeding Pauli distortion. For each 
possible exit from the Rj(0) rotation chain there is a second i^k(C) chain. The 
boxes containing arrows in this figure represent the entire rotation chain protocol 
depicted in Fig. O Arrows which end with a x indicate that the originating party 
has not participated in the protocol for this specific chain. While both parties 
participate in the first chain only one of the secondary chains has overlapping 
actions of Alice and Bob. In this figure Alice exits the first chain on her qth 
opportunity, while Bob exits on his pth where p > q. The dashed "L" -shaped 
line indicates the actual path taken by the principal system in this case. Actions 
performed by either party not intersecting this line do not contribute to the final 
outcome, but the no-signalling restriction requires that they are performed so 
that all eventualities are covered and the desired unitary is implemented with 
certainty. 



This gives a tree structure of concatenated chains hke that shown in Fig. [6l Fohowing 
this figure suppose that Alice exits the first chain first on her qth opportunity. The 
(i-qubits she then possesses will be in a state carrying a large accumulative distortion 
dependent on its history up to that point through the first chain as 

Cra,Crb,+iCrb,Cra,Cra,_i • • • CTb^ CTbi CTai CTbi W | ^) • (2) 

She can go ahead and engage these qubits with the designated second rotation chain 
for this exit point which, in an identical way to the first, will apply i^k(0- Since the 
accumulative distortion in Eq. ([2]) contains two of every previous distortion, except for 
(Jbg+i, the criterion for Alice's success in applying the second rotation i^k(0 is based 
only on Bob's last teleportation, via b^+i G c(k), and not on the complete history. 
This is in stark contrast to the Vaidman scheme. 

As depicted in Fig. [6] both Alice and Bob must perform all the necessary steps 
for each of the second chains covering all possible exit points of the other party up 
to the point where they themselves exit from the first chain. This ensures that if the 
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other party was successful before them the overall scheme still succeeds with certainty. 
Since all the first chain and all those spawning from it have a zero probability of 
continuing indefinitely the overall scheme also has a finite average consumption. It is 
also clear that this concatenation can continue, albeit at increasing expense, for any 
finite sequence of rotations to be applied to the d-qubit initial state, and still retain a 
finite average entanglement consumption. We now examine more precisely what this 
consumption is. 



4.3. Average entanglement consumption 

To measure the consumption we count the number channels that are required on 
average. A detailed description of this calculation is given in [Appendix A[ In summary 
we find that the average channel consumption for a single rotation chain is (ci) =5, 
while concatenation of further rotation chains results in a rapid growth as (02) = 20, 
(cs) = 59, (C4) = 156 and so on. These channel averages (c^) give the average 
consumption of entanglement, measured in ebits, once they are multiplied by d. By 
utilising the recursive structure of the protocol the average channel consumption (c^) 
can be approximated, in the limit of a large number of concatenated rotations n, by 
the exponential growth 

{Cn)^Cr. (3) 

where C = (10 + 7v^)/4 and (/) = 1 + v^. As shown in Fig. [TJb) the fit of this 
approximation to the exact consumption for n > 4 demonstrates that it is very good 
for all but the smallest n. 

We saw earlier that a rotation by an angle 7r/2 has the special property that 
Rj (7r/2) is a stabiliser. In this case no rotation chain steps are required. More generally 
a chain involving a binary angle = 7t/2^ not only implements the desired rotation 
when a commuting distortion occurs but also when a sequence of D — 1 erroneous 
rotations are made since the required double angle correction reduces to Rj{7r/2). 
Thus for rotations with a binary angle the chain terminates with certainty in a finite 
number of teleportations [HI |l7j . An example of a single rotation chain applicable to 
an angle which is any odd multiple of 7r/32 is given in Fig. [Tfa). The total amount 
of initial channels which must be available for n concatenated rotation chains, each of 
length is finite but grows exponentially with n as 

{D - mo-i r - 1] 

D-2 

In an identical way to the D ^ 00 case the average consumption (cn) of this initial 
resource can be computed. In Fig. [Tl^b) both C^^^j^ and (cn) are shown for D = 3 
and D = 7. For D < 3 both the initial resource and the average consumption remain 
below the average consumption for D ^ 00. For D > 3 the average consumption (c^) 
rapidly converges to the D ^ 00 limit and the initial resources grow far beyond it. 

While we have shown a finite average consumption in general a practically relevant 
question arises as to what effect the restriction to finite initial resources has for general 
rotations. One strategy for doing this is to simply truncate continuous angle rotation 
chains to some maximum number of iterations. Indeed if this strategy is applied 
to the Vaidman scheme, by limiting its tree-depth, it results in it having a finite 
consumption equal to its finite initial resources. This approach, however, introduces a 
possibility that the measurement will fail completely and yield no result. Binary angle 
rotation chains present a more elegant means of exploring the implications of finite 
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initial resources for our scheme. Rather than truncating continuous angle rotation 
chains, we instead consider a more interesting and relevant scenario where the desired 
rotation angle is discretised to a multiple of a binary angle that matches the maximum 
allowed number of iterations. Given the decomposition of the desired final unitary 
U into a sequence of Pauli rotations the new scheme performs rotations about the 
nearest binary angle = [2^6>/7r]7r/2^ to the exact angle 6. In this way we obtain 
a measurement scheme constructed from finite initial resources, consuming only a 
fraction of those on average, and is guaranteed to succeed at the expense of only 
implementing an approximation of U. Since the finite scheme no longer maps the 
eigenstates of our desired observable O to the direct product basis a crucial question 
is then how much the measurement statistics of our approximation differ from the 
exact case. For a single rotation Rj{0) the error can be defined as 



where the maximum is taken over all normalised states | ^) and AO = — 0. The error 
E{0, 0) can be shown [15] to bound the absolute difference between the probabilities 
P and P for the outcome of any positive operator valued measurement on i^j(^) | ^) 
and R-^{p) \ ^), respectively, as \P - P\ < 2E{0, 0). An upper bound to E{0, 0) can be 
obtained by assuming the maximum deviation for = 7r/2^+^ which gives 



and shows that the error decreases exponentially with D. For a sequence of n rotation 
chains implementing the binary approximation to U an important result from quantum 
computation [35] shows that the overall error is at most the sum of the errors of the 
individual rotations and so the exponential suppression of the measurement error is 
retained. We will now finish this work by applying rotation chains to a variety of 
basic measurement problems. Our results will mostly concentrate on the average 
entanglement consumption of continuous angle rotation chains but can be equally 
viewed as an upper bound to the average consumption of any finite binary angle 
scheme. 

5. State verification measurements 

Our first application of the tools developed in Sec. |H is to state verification 
measurements. A verification of a given state | ^) means that the measurement 
always yields a "yes" result if the system is in the state | ^) and a "no" result if 
the system is in any orthogonal state | If the initial state is a superposition then 
the appropriate probabilities for "yes" and "no" results follow from the linearity of 
quantum mechanics. No assumptions are made about the final state of the system so 
there is no requirement that | ^) itself is undisturbed by the verification measurement. 

5.1. Two-qubits states 

To begin we present a simple scheme which performs a demolition verification of any 
two-qubit state | ^) G (D^ (8) split between two parties A and B. The construction 
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(a) (b) 




Figure 7. (a) An example of a rotation chain for a binary angle 6 = 7r/2^ with 
D = 5. The scheme is guaranteed to terminate on Alice's second step q = 2 since 
the correction is a rotation by 7r/2 which always succeeds modulo a proceeding 
Pauli distortion. For D odd there is an outcome p = corresponding to when 
Bob never succeeds, (b) The average channel consumption (cn) for the scheme 
performing n successive rotations of the form Rj^(On) • • • Rj^{Oi). The exact 
calculation of (cn) for non-binary Oj angles (i.e. infinite length rotation chains) 
is shown (□) as well as the pure exponential approximation (solid line) given in 
Eq. (O. The exact (cn) is also shown for binary angles with D = 3 (o) and D = 7 
(x), along with the total amount of initial channels Cjj^j^ which must be available 
in both cases as the (dashed line) and (dotted line), respectively. 



of a verification scheme for | ^) follows from its corresponding Schmidt decomposition 
I *) = cos i^e) I Ma I Mb + sin {^9) \ \ , (5) 

where | (j)k) are Alice's (Bob's) local Schmidt states and we have parameterized the 
corresponding Schmidt coefficients according to an angle < 6 < 7r/2. To verify | ^) 
our scheme implements the inverse of the quantum circuit, shown in Fig. [D^a), that 
prepares | ^) locally. Starting from the initial state | 0)^ | 0)^ this circuit performs a 
rotation Ry{0) into the state | Ai) = cos(|^) | 0) + sin(|^) 1 1) for qubit A, applies a 
CNOT gate Ucn between the pair of qubits controlled by A, and is then followed by 
the product of single-qubit unitaries Va^Vb which map the computational basis of 
each qubit into the respective local Schmidt basis as \ k) ^ | (/>/c), with k G {0, 1}. 

To invert this the verification scheme therefore starts with Alice and Bob 
performing the local unitary transformations V\ and V^. Bob then teleports his 
half of the system B to Alice leaving qubit A and her ancilla qubit a in her possession 
in the distorted state (jQhV\®Vj^ \ ^) Aa described by his Bell measurement outcome b. 
This is shown in Fig. [8l^b) and is labelled as step (i). Alice now applies a CNOT gate 
between qubits A and a. Since the CNOT gate is a stabiliser any distortion can be 
propagated past it at the expense of spreading the distortion over the control qubit. 
Regardless of this Alice can be certain that she has implemented, up to a distortion, 
Ucn^A ^ I ^o) = I I disentangled qubit A from qubit a. She can then 

measure qubit a completing step (ii) in Fig. [8l^b). The distortion aob ensures that the 
outcome reveals no information to Alice. 

Alice must now map the remaining qubit A, with certainty, into the z-axis so 
it too can be measured. To achieve this she needs to apply a rotation Ry{—0). Her 
situation is identical to the scenario considered in Sec. 14. H and can be readily dealt with 
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Figure 8. (a) A local circuit which constructs an arbitrary two qubit state | ^} 
from a standard initial state | 0} | 0} . Firstly a rotation Ry (0) is applied to qubit A 
forming a single qubit state | Ai) composed of a superposition with real amplitudes 
corresponding to the Schmidt coefficients of | ^}. This is then followed by a 
CNOT gate controlled by qubit A and then two arbitrary single-qubit unitaries 
Va and Vb are applied which rotate the computational basis into the required 
local Schmidt basis of | ^}. (b) A nonlocal instantaneous verification of the state 
I ^} essentially reverses the circuit shown in (a). In step (i) the inverses of the 
local unitaries Va and Vb are applied and the qubit B is teleported to Alice. In 
step (ii) Alice then applies the CNOT and measures out the received qubit. The 
most complicated step is (iii) where the rotation Ry(—0) is applied to qubit A. 
This is implemented via a single-qubit rotation chain followed by a measurement 
of the successful output. 



using one single-qubit rotation chain as shown in step (iii) of Fig. [Sfb). The average 
entanglement (e) consumed by this nonlocal two-qubit state verification scheme has 
no dependence on the value of except when it is a binary angle. In particular for a 
maximally entangled state with = 7t/2 precisely 1 ebit is required, while the partially 
entangled states with = 7t/4:OtO = 7t/S need precisely 2 and 3 ebits to be verified, 
respectively. Binary angles = (2m — l)7r/2^, with m integer, have a consumption 

{eo) = 6 + 2^-^ + 2-^/2 + (-1)''] - + (-1)"]} • (6) 

For any angle that is not binary (e) = 6 ebits on average and is independent of 
the entropy of entanglement of the state | ^). As expected this consumption is the 
asymptotic limit D ^ oo of Eq. ([6]). 

Although this measurement scheme was devised to verify a single state | ^) the 
"no" results do in fact verify a special set of states in the orthogonal complement, 

I ^i) = cos {^0) I (/)o)^ I + sin {^e) I I (/)o)5 , 

I ^2) = sin (i^) I Ma I Mb ' cos {'^O) \ \ , 

I ^3) = sin (1^) I M^ I (/>i)^ - cos (i^) I M^ I Mb . (7) 

which are related to | ^) in the same way the Bell states are related to | ^0). The 
scheme is therefore a verification measurement of an operator possessing these states, 
along with | ^), as eigenstates. When 6 = it/2 the scheme is the demolition verification 
measurement of the Bell operator already presented in Fig. [2fb). We shall consider 
shortly in Sec. [6] the more complicated task of simultaneously verifying an arbitrary 
set of eigenstates. 
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5.2. Bipartite multi-qubit states 

The verification scheme for two-qubit states can be generalized for any state | ^) G 
Ua^I-Lb spht between two parties A and B, where Ua = (C^)^^ and I-Lb = (C^)^^ 
are tensor-products of qubits. Again the scheme operates by performing a nonlocal 
unitary U which maps | ^) to a locally measurable state as /7 | ^) ^ | 0, 0, • • • , 0), 
modulo Pauh distortions. As with two-qubits the scheme focuses on the Schmidt 
decomposition of | ^) which now takes the form 



B ' 



where x ^ min(2^,2^) is the Schmidt rank designating the number of non-zero Xa 
Schmidt coefficients satisfying = 1, and | are Alice's {A) or Bob's (B) 

local Schmidt states. Before starting the verification scheme Alice and Bob use this 
canonical form for the target state to determine local unitaries V\ and which can 
be applied to their v- and K;-qubit subsystems, respectively, to map their local Schmidt 
states into the computational basis. For either party this takes the form 

= |a,0,---,0), 

where a is a (i = [log2(x)l dimensional binary vector representing the integer index 
a and | a) is a d-fold tensor product of the eigenstates | 0) and 1 1). The action of 
the V's on the orthogonal complement to the subspace spanned by the local Schmidt 
states I (/)q,) can be defined arbitrarily. The resulting state {ip) = V\ ^ V^]"^) is 
then entirely contained in the smallest possible subspace of the original {v + i(;)-qubit 
system composed of two equal-sized d-qubit subsystems at A and B. Once this initial 
compression is performed the remaining v — d and w — d qubits at Alice and Bob's 
location containing (some of) the orthogonal complement to | ip) can be immediately 
measured in the computational basis. Any outcome other than | 0) for each qubit 
indicates an immediate "no" result. 

Having mapped the target state | ^) to | tjj) the scheme then continues by 
implementing the inverse of the circuit which locally constructs | tp) from the 2d- 
qubit initial state | 0, 0, • • • , 0). Specifically this construction circuit begins by creating 
a superposition state | A^^) on the first d qubits (generalizing | Ai) from earlier) of the 
form 

\Ad) = E^-^i^) 

X 

where are the real Schmidt coefficients of | ^) indexed by the d-dimensional binary 
vector X and appropriately padded with zeros if necessary. This type of superposition 
state can be formed by a cascade FiF2F^ • • • F^~^ of so-called uniformly controlled 
rotations (see [Appendix B| and [36 for details) about the y-ax.is acting on the first set 
of d qubits. Once the state | A^^) | 0, • • • , 0) has been generated a staircase sequence 
of CNOT gates are applied between pairs of qubits from the first set of d and the 
second set of d (see Fig. lCip . This then constructs the canonical Schmidt form for the 
state I i/j) as 

1 V^) = ^ A^ I x) I x) . 



A more detailed description of this circuit is given in [Appendix C where it is shown 
explicitly for d = 4 qubits in Fig. ICll 
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Figure 9. The nonlocal verification scheme for a state | ^> G (C^j^^^ (g) (C^j^^^. 
After performing local unitaries and which map the target state | ^} to a 
2(i-qubit state | ip) and measuring out the orthogonal complement, Bob teleports 
his d qubits to Alice. Following the inverse of the circuit in Fig. ICll Alice performs 
a sequence of CNOT gates between her d qubits and those received from Bob, 
with the latter being measured immediately afterwards. Alice then inverts the 
sequence of uniformly controlled rotations in the y-axis which produce | A^} via 
2^ — 1 concatenated d-qubit rotation chains. Note that although the concatenated 
rotation chains are drawn sequentially they should be understood as forming a 
massively recursive structure. The output from the final chain is then measured. 
We have also ignored here the optimisation that successive sets of rotation chains 
act on smaller number of qubits due to the structure of the circuit in Fig. ICll 



Given this construction circuit the verification scheme proceeds with Bob 
teleporting his d qubits to AHce. She then implements the sequence of CNOT gates 
locahy on the 2d qubits in her possession. Since this part of the circuit is a stabiliser 
it is guaranteed to succeed but will propagate Pauli distortions originally confined to 
the ancilla qubits receiving Bob's half of the system to Alice's half. This leaves a state 
of the form aj | A^^) (8) | 0, • • • , 0) in Alice's possession, but with only Bob knowing j. 
Since the CNOT's have successfully disentangled the two halves the qubits originating 
from Bob are now in a product state in the computational basis and can be measured 
immediately. Alice is now left with her d qubits which require the final sequence 
of uniformly controlled rotations to be applied. The decomposition of the cascading 
sequence of uniformly controlled rotation into Pauli rotations requires 2^ — 1 distinct 
gates (Fig. IBlt b) shows this decomposition for F^) which, as expected, is identical to 
the number of independent rotation angles defining | A^^). The scheme then implements 
these rotations by concatenating rotation chains. The complete nonlocal verification 
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scheme for | ^) is shown in Fig. [9l 

Combining the scahng in the number of rotations with that of the average 
consumption (c^) for concatenated rotations in Eq. ([3]) yields an exponential of an 
exponential scaling 

(e) = Cdcf)'^^-^ ebits, 

with the minimum number of qubits d required to contain the Schmidt rank of the 
target state | While this consumption lacks any dependence on the values of the 
angular parameters (excluding binary angles), it does depend on the entanglement in 
I ^) as measured by the Schmidt rank. Note that the choice of unitary U which can 
implement a verification of a single state | ^) is not unique. However, the choice made 
in this scheme is unique in the sense that it is defined only by the nonlocal parameters 
of the target state itself and is therefore the most economical. Also, similar to the two- 
qubit case, this state verification scheme is also a verification measurement of a special 
operator whose complete set of eigenstates spanning the orthogonal complement also 
happen to be mapped to locally measurable states. 

6. Instantaneous measurements of nonlocal operators 

We now generalize the measurement schemes introduced so far to perform a 
simultaneous demolition verification of each of the non-degenerate eigenstates of an 
arbitrary nonlocal observable O. Our strategy is again to implement a nonlocal unitary 
U which maps each eigenstate of O into a different computational basis state which 
is then locally measurable. Unlike the state verification scheme, which is already a 
special class of operator measurement, here we are interested in complete generality. 

6.1. Two-qubit observables 

Before outlining a scheme for the most general case we first describe some schemes 
for special classes of eigenstates for two-qubits. A particularly interesting class of 
observables are those with a twisted eigenbasis, 

I*o) = |0)^|0)b, 

I*i) = |0U|i)b, 

I = 1 1)^ [sin (i^) I 0)s + e'^ cos (i^) 1 1)^] , 

I *3) = 1 1)^ [cos (i^) I 0)s - e'^ sin (i^) | 1)^] . (8) 

Despite these eigenstates being product states it has been shown that if an ideal 
measurements of this basis were possible it would allow violations of causality [T2[ |T7] . 
Unlike the direct (or untwisted) product basis a verification measurement of the 
twisted product basis requires entanglement pT]. As seen in Fig. [TOTa) the 
circuit which generates this basis locally can straightforwardly yield the nonlocal 
measurement scheme in Fig. [ToT b) which utilizes just one single-qubit rotation chain. 
The average entanglement consumption for this basis is dependent on the eigenstate 
requiring (e) = 4 ebits for | ^o) and | ^i) (where no rotation is needed), or (e) = 6 ebits 
for I ^2) and | ^3). In this way the measurement of the twisted basis is very similar to 
the eigenbasis in Eq. ([7]) encountered for state verification. There the eigenbasis was 
composed of equally but partially entangled eigenstates and needed (e) = 6 ebits for all 
eigenstates. The consumption for entangled eigenstates, however, grows quickly even 
with a slight generalization. For instance adding an identical relative phase e*'^ to all 
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of the basis states in Eq. ([7]) necessitates the concatenation of two single-qubit rotation 
chains (first for the 2:-axis and second for the y-ax.is) and elevates the consumption 
to (e) = 21 ebits. Generahzing further gives an eigenbasis composed of partiahy but 
unequahy entangled eigenstates with differing relative phases, as 

I *o) = sin (i^i) I 0)^ 1 0)^ + cos (i^i) e'^^ \ 1)^ 1 1)^ , 
I *i) = cos (i^i) I 0)^ I 0)^ - sin (i^i) e'^^ | 1)^ 1 1)^ , 
I *2) = sin (1^2) I 0)^ I 1)b + cos (i^2) e"^^ \ 1)^ 1 0)^ , 
I *3) = cos (1^2) I 0)^ I 1)b - sin (1^2) e'^^ | 1}^ | 0)^ , 
described by 4 real parameters. From the local preparation circuit shown in Fig.fTOTc). 
which contains two uniformly controlled rotations, a total of 4 Pauli rotations are 
required (one for each parameter). The corresponding nonlocal measurement scheme 
is shown in Fig. [TOTd). The first three rotations require two-qubit chains, while the 
last acts only on the second qubit and so can be reduced to a single-qubit chain. 
Following the calculation in [Appendix A| the average entanglement consumption for 



the measurement of this eigenbasis is (e) = 224 ebits. 

To devise a scheme to deal with the most general eigenbasis we require a circuit 
composed only of Pauli rotations, each of which can be handled with rotation chains, 
that can build a general SU(4) unitary U. For two-qubits this can be accomplished 
by using the so-called Cartan decomposition |37] of an SU(4) unitary as 

U= {Va^ Vb) ei^i^i^^ie^^^^^^^^e*^^^^^^^ {Wa ^ Wb) , 

where Va, Ve, Wa and Wb are single qubit SU(2) gates, and 7r/2 > > ^2 ^ ICsl ^ 0- 
The Cartan decomposition has been extremely popular in recent work [38l [39l HO] on 
quantum circuits since it beautifully exposes the nonlocal content of any two-qubit 
unitary. Rather than needing to consider all 15 real parameters the classification 
of two-qubit unitaries reduces to the three coordinates (^1,^2,^3) and allows the 
set of locally inequivalent gates to be characterized geometrically as points within 
a tetrahedron [39] . In the context of nonlocal measurements the first pair of unitaries 
Wa and Wb can be trivially applied by each party locally before the start of the 
scheme. If the last pair of single-qubit unitaries are then decomposed as a sequence of 
rotations V = Rz{a)Ry{l3)Rz{j)^ we see that the U is expressed entirely in terms of 
Pauli rotations. Furthermore since our final measurement after U will be in the z-axis 
the latter rotation for either of the local V unitaries is not necessary. This leaves 
7 real parameters relevant for the nonlocal measurement. 

To compute the average entanglement consumption in this most general case 
we perform one optimisation. Rather than simply concatenating 7 two-qubit rotation 
chains (which would consume 2(c7) + l = 4719 ebits on average), we instead split up the 
qubits after the three nonlocal gates and perform the final two single-qubit rotations 
on them separately and simultaneousl^lj. A simple modification of the calculation in 
I Appendix A| shows that this splitting gives a consumption equivalent to 5 two-qubit 
rotation chains and so the average entanglement consumption for the most general 
two-qubit observable is 2(05) + 1 = 787 ebits. Finally, recall from Sec. 14.31 that the 
average consumptions quoted above are upper-bounds to those that would be attained 
if the angles involved were binary. For example the twisted basis measurement instead 
consumes at most an average of 3 ebits if 6 = (2m — l)7r/8, where m is an integer. 

J Splitting the qubits up can only be done once they never need to interact again. Once separated 
the qubits progress along different pathways through the scheme and no party knows precisely where 
the actual pair are located. 



Entanglement consumption of instantaneous nonlocal quantum measurements 



24 



(a) 



(b) 



BM 



(c) 



(d) 



\k)- 



T ? T ? y u,, 

\i} - |fi,(9o| - |^;:(9;i^fl,((pi)i - |fi;;((^ ^ L!=Rn 



l*0> 



BM 



\Rzm 



1 ■■■ ) -^-l ^^-(-^3) 



Figure 10. (a) A local circuit which constructs the twisted basis set | ^fc^} from 
the computational basis \k) Here the indices k and i are bits which together 
as ki are a binary representation of the {0, 1, 2, 3} index used in Eq. Firstly a 
controlled rotation Ry{6) is applied to form the twist and then another rotation 
Rz(^) is performed to introduce the phase, (b) The nonlocal measurement 
scheme which performs the inverse of (a). The phase can be removed locally 
by Bob while the final controlled rotation Ry(—6) can be replaced by a classical 
control. If a rotation is required it is implemented by a rotation chain with the 
output being measured in the z-axis. (c) The local circuit which constructs a 
general partially entangled basis set from \k)\£). Dependent on the state \k) 
the second qubit is rotated about the y- and 2;-axis by different angles according 
to two uniformly controlled rotations, followed by a CNOT gate which entangles 
them. The uniformly controlled rotations can be decomposed into the sequence 
of Pauli rotations shown, (d) The nonlocal measurement scheme which performs 
the inverse of (c). A concatenated sequence of two-qubit rotation chains is applied 
implementing the inverse of the Pauli rotation decomposition in (c). Note that 
the final rotation is applied to one qubit only. 



6.2. Bipartite multi-qubit observables 

The situation for mapping the eigenstates of a nonlocal d-qubit observable to the 
computational basis, is less clear due to the lack of an optimal quantum circuit 
construction for arbitrary SU(2^) unitaries. On general grounds an exponential 
number of one-parameter Pauli rotations are expected to be required since an SU(2'^) 
unitary is defined by 4^ — 1 reals. However, as the two-qubit case illustrates, not 
all of these parameters are relevant for nonlocal measurements. Recent work 
on quantum circuits allows us to identify (although not optimally) some of these 
redundant local parameters and moreover provides an explicit construction of such 
a circuit decomposition in terms of Pauli rotations. By exploiting a cosine-sine 
decomposition recursively a circuit composed only of uniformly controlled rotations 
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Figure 11. The quantum circuit for an arbitrary d = 3 qubit SU(2^) unitary U 
in terms of 17 uniformly controlled rotation gates (see [36] and [Appendix B] for 
more details on these gates). The first 2^+-*^ — 2 = 14 gates alternate between 
rotations in the z- and y-axis. The last d gates, which are shaded, are all in the 
z-axis and for nonlocal measurements where U is to map our desired eigenstates 
to the direct product basis, this final cascade of gates can be ignored. 



was devised in [36 . So far for d > 4 qubits this construction represents the most 
efficient circuit decomposition in terms of the number of CNOT and elementary single- 
qubit gates needed. For our purposes the important aspects of this construction 
are that an SU(2^) unitary can be formed from a circuit of 2^+^ — 2 uniformly 
controlled rotations F^_-^^ alternating between the y- and 2:-axis, followed by a 
cascade of d uniformly controlled rotations FiF2---Ff_^ involving sequentially 
decreasing numbers of qubits and all in the 2:-axis . To illustrate this a complete 
decomposition [36 of a d = 3 qubit gate is shown in Fig. [Til If this type of 
decomposition is used in a nonlocal measurement scheme then the final cascade 
(shaded in the example in Fig. [TT]) can be ignored since all qubit measurements 
terminating the circuit are performed in the computational basis. As shown in 
[Appendix C[ each Fd-i gate requires 2^~^ Pauli rotations, equal to the number of 
reals defining it. Thus using this circuit construction 4^ + 2^ concatenated d-qubit 
rotation chains are needed to implement an arbitrary SU(2'^) unitary. An exponential 
of an exponential scaling with the number of qubits d again arises for the average 
entanglement consumption (e) for a nonlocal measurement of a bipartite multi-qubit 
observable. 

7. Conclusions 

In this work we have studied in detail the average entanglement consumption for both 
nonlocal state verification and operator measurements. The approach applied was 
similar to that of earlier work [17] where teleportation was employed to first localise 
the system and then used in a multi-round protocol to implement the mapping U 
from a general set of states into a locally measurable set. The central advancement 
here is that in contrast to previous schemes [161 E! this can be done by consuming 
only a finite amount of entanglement on average, even in the most general cases, while 
continuing to succeed with certainty. The reason for this is that the application of U 
is broken up into a sequence of Pauli rotations Rj{0). By expressing teleportation in 
terms of Pauli distortions a decomposition of this type has the privileged feature that 
distortions at each step either leave the operation Rj{0) intact or produce only one 
type of failure, namely Rj{—0). This enabled us to construct a rotation chain scheme 
with a bipartite termination condition that applies Rj {0) with certainty and consumes 
only a finite amount of the initial entanglement on average. Moreover we showed 
how rotation chains can be concatenated forming a recursive structure that permits 
arbitrarily complex sequences of them to be applied while retaining a finite average 
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consumption overall. As an aside this result also shows that bipartite distributed 
quantum computation can be performed instantaneously with only a finite average 
entanglement consumption. Interesting comparisons with distributed cluster state 
one-way quantum computation could be made [311 132]. 

Despite the finiteness of the entanglement consumption its growth is found to 
display an extremely unfavourable exponential of an exponential scaling with either 
the Schmidt rank of the state to be verified, or size of the system on which the nonlocal 
observable acts. While this scaling is scheme dependent there is good reason to believe 
that it is fundamental to the underlying problem. Indeed, both the complexity of 
constructing circuit decompositions of a general unitary and the recursive protocol 
required to overcome the no-signalling constraints individually display exponential 
scaling. Whether causality forces any conceivable nonlocal measurement scheme to 
have this combination of scalings is an open problem. 

Our aim here has been to prove that general nonlocal measurements can be 
accomplished with certainty while consuming on average only a finite amount of 
entanglement. While achieving this the resulting scheme has not been proven to 
be optimal. Specifically, the consumption in our schemes have no dependence on the 
actual value of the various rotation angles which appear, beyond the special case 
of binary angles. Instead the consumption is always averaged over integer units 
of ebits and the resulting measure of complexity of the required unitary is coarse- 
grained to simply counting the number of non-trivial rotation angles specifying it. It 
is possible that a more efficient scheme can be devised where the entangled resources 
are qubit pairs which are partially entangled, in a way that is linked to the rotation 
angles, thereby providing a tailored resource and an angle dependent entanglement 
consumption even for continuous angles. 

Another important deficiency of the schemes presented is that they do not 
yet represent a practical deterministic measurement procedure due to the infinite 
amount of entanglement that needs to be initially distributed. Here a finite average 
consumption arises because we have introduced termination conditions for both 
parties. The requirement for an infinite amount of initial distributed resources appears 
to be of a different origin, namely the continuous real parameters which appear in the 
problem. An important exception to this was shown to occur for angles that are binary 
fractions of tt where only a finite amount of initial entanglement is needed [16 . The 
measurement of the Bell operator is an extreme example of this. Using this result 
we considered the experimentally relevant case where arbitrary rotation angles are 
discretised to binary angles. We showed that this results in nonlocal measurement, 
which is still certain to succeed, but requires only finite initial resources. The resulting 
measurement performed is an approximation to the exact one and we bounded the 
error of this procedure. Although not proven it appears unlikely that an exact protocol 
exists for the most general measurement which succeeds with certainty and requires 
only a finite amount of initial entanglement. Finally, unlike Vaidman's scheme J7] 
and stabiliser measurements our rotation chain methods do not easily generalise to 
more than two-parties and so an interesting open problem is whether all multi-party 
nonlocal measurements can be done with a finite average entanglement consumption. 
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Appendix A. Computing the average entanglement consumption 

In this section the calculation of the average entanglement consumption for the 
rotation chains used in our scheme is described. We first calculate the average number 
of channels (complete teleportations of the system) required for the implementation 
of a single rotation. Using this result and the recursive structure of the scheme we 
then calculate the average consumption for two rotations, and finally generalise this 
to an arbitrary number of rotations concatenated together. 

Appendix A.l. A single rotation chain 

Following the discussion in Sec. 14.11 we consider a chain where Alice possesses the 
entire system initially and begins the protocol as in Fig. [H The probability that Alice 
terminates at her qih step while Bob terminates at his pth step is given by {\Y^^ • 
The consumption of channels is governed by the last party to terminate and denoted 
by Ci. If Alice terminates last and at her qih opportunity then the total number of 
channels used will be ci = 2q and so even. Likewise Bob terminating last at his pth 
opportunity gives a consumption ci = 2p — 1 and is odd. Note that a rotation chain 
has a minimum consumption of 2 channels and consequently for Bob to terminate last 
we require p > 2. The average number of teleportations (ci) is then easily calculated 
as a sum of the case where Alice exits the chain first and when Bob exits the chain 
first, as 

q /-i\q-\-p «^ P~'^ /-i\<?+p 

(^O=EE(0 2, + EE(1) (2,-1)=5. 

q=l p=l ^ / p=2 g=l ^ ^ 

In order to calculate the average consumption when two rotation chains are 
concatenated we need to introduce two more average consumptions of a single chain. 
Specifically we define (ai) as the average consumption when only the initiating party 
is actually performing any actions on the chain, and likewise (bi) for the case where 
only the receiving party is performing any actions on the chain. These are readily 
computed as 

In the next two subsections we shall generalize these quantities to (a^), (bn) and (c^) 
to designate the corresponding average consumptions for n chains concatenated where 
only the initiating party, only the receiving party, or both parties are performing 
actions from the start, respectively. 

Appendix A. 2. Two rotations chains concatenated 

As with a single chain the consumption for two concatenated rotation chains breaks 
into two cases depending on whether Alice or Bob exit the first chain last. In Fig. [6] 
and Fig. lAll the latter situation is illustrated with Alice exiting the first chain on the 
qth opportunity, while Bob exits on his pth, with p > q. Up to her exit point Alice 
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Figure Al. Another version of Fig. [6] but with the consumption quantities 
{ai},{6i} and (ci) labelled for the appropriate second chains. The independent 
actions of Alice and Bob are shaded for the case where Bob exits the first chain 
last. The dashed "L" -shaped line indicates the actual path taken by the principal 
system and lies where their actions overlap. 



must play the role of the receiving party on all the second chains Bob has available to 
him at his exit points. Since, for this case, Bob has not used any of these chains Alice 
consumes q{bi) channels on average through these redundant actions. Similarly Bob 
must be a receiving party for all p — 1 of Alice's second chains up to his exit point 
p consuming {p — 2){bi) + (ci) channels on average, with the (ci) accounting for the 
fact that one second channel (the qth) was used by both parties. At his exit point 
Bob will consume a further (ai) channels for the second chain which only he acts on. 
Finally, since Bob exits last (so p > 2) the consumption of channels in the first chain 
will be 2p — 1. Performing the analogous counting of channels for the opposite case 
where Alice exits the first chain last and averaging over all the exit points p, q of the 
first chain with probabilities (|)^^^ gives 

(C2) =5 + (ci) + (ai) + 2(6i) =20. 

It is clear from this that the quantity (r2) = (ai) + represents the cost of 

recursion within the protocol which in this case doubles the consumption from that 
expected for two independent rotation chains. We can similarly compute the one-party 
consumptions for two rotations as (a2) = 4 + (ai) -\-2{bi) and (62) = 3 + (ai) + (hi). 

Appendix A. 3. Concatenating n rotation chains 

The generalization to n concatenated rotation chains can be computed straightfor- 
wardly by using the recursive structure of the protocol. The calculation proceeds in 
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an identical way to two chains except that each second chain itself is now regarded as a 
sequence of n — 1 chains. This gives the linked recurrence relations for the component 
consumptions 

(Cn) = 5 + (Cn-l) + (ttn-l) + ^{K-l), 
{an) =4+(an-l) + 2(6n-l), 
{hn) = 3 + (ttn-l) + (^n-l). 

After denoting the recursive consumption as (r^) = (a^-i) + 2{bn-i) we see that 
it obeys a closed recurrence relation (r^) = 3{rn-i) — (^n-2) — {^n-s)- Given the 
recursive consumptions (ri) = 0, (r2) = 10 and (ra) = 34 a closed solution for (r^) 
can be found as 

{rn)=Ar^B(^^^ -7, 

where A = (3 + 2V^)/2, B = {3 - 2V2)/2, and (/) = 1 + V^. For ah but the smallest 
n the recursive consumption (rn) is well approximated by only the first term and so, 
as might be anticipated, displays a pure exponential growth with n. Since the total 
average consumption is (c^) = 5n + Xlfc=i(^/e) it also displays a pure exponential 
scaling asymptotically as 




where C = (10 + 7a/2)/4. As shown in Fig. [3 this approximation to the exact 
consumption is already very good once n > 4. 



Appendix B. Uniformly controlled rotations 

We make repeated use of a special sequence of multi-qubit controlled rotation gates 
which, following the nomenclature of [36 , are called a uniformly controlled rotation. 
This gate is denoted as F^(a, ^) and signifies a /c-fold controlled rotation of some 
qubit n about the three-dimensional axis a by one of the 2^ different rotation angles 
contained in 6 = (6>i, 6>2, • • ' ? ^2^)- The uniformly controlled rotation where qubits 
1, • • • , n — 1 are the controls and qubit n is the target has a matrix representation 

/ ^a(^l) \ 
V i?a(^2"-0 / 

This gate is motivated by its easily interpreted action, namely it can be seen to 
implement a different rotation angle on qubit n dependent on each of the 2^~^ basis 
configurations of the control qubits. In Fig. IBll (a) the circuit defining is shown. 
For our applications we shall exclusively consider rotations in either the ?/-axis F^{y) 
or z-axis F^{z) and we will frequently use a construction which decomposes such 
F^'s into 2^ single-parameter Pauli rotations. Specifically for a uniformly controlled 
rotation F^{y^6) this construction involves performing a single qubit rotation Ry on 
qubit n, followed by two-qubit rotations Rzy between each of the k control qubits and 
qubit n, followed by three qubit rotations Rzzy between every pair of the k control 
qubits and qubit n, and so on until a final rotation Rzz---zy is performed involving all 
the k control qubits and qubit n. For this example the Pauli strings for the rotations 
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(a) 



(b) 



Figure Bl. (a) The circuit of multi-qubit controlled rotations which constructs 
the uniformly controlled rotation (a, 0) about an axis a defined by an eight 
component vector of angles 0. The gate symbol we use for a uniformly controlled 
rotation is on the left with grey circles, (b) A decomposition in terms of Pauli 
rotations is shown for a uniformly controlled rotation F^{y,6) about the y-axis 
and defined by a four component vector 0. The corresponding Pauli rotation 
angles are given are related to the four angles in ^ as = — (^i + ^2 + ^3 + ^4)/^, 
6 = {02-0i-03 + O4)/8, ^3 = (6'3+6'4-6'i-6'2)/8 and ^4 = (6*2 + 6*3 - 6'i - 6'4)/8. 
This decomposition readily generalises to uniformly controlled rotations involving 
larger numbers of qubits. 



always specify a ay on qubit n and on any of the k control qubits. Each of the 2^ 
rotations involves a different rotation angle which itself is a linear combination of the 
angles in 0. A detailed example of this decomposition for a single F^{y) gate is given 
in Fig. IBlf b). while in Fig. [ToTb) a decomposition for the pair of gates F2{y)F2{z) is 
depicted. 




Appendix C. Constructing a Schmidt superposition state 

For bipartite multi-qubit state verification in Sec. 15.21 a circuit is required which 
generates a normalized state in a superposition of all 2^ computational basis states 
with arbitrary real amplitudes. Such a superposition state can be parameterized in 
terms of 2^ — 1 angles < Oj < ir with amplitudes given by 

= cos (iew) COS (ieLt,) • • • cos (ieL'^i,...,,) , 

where the angles O are defined from via 

^100 — ^5 

efJi = ^5 - TT 

©fi'o = 0, 
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|Ai> |A2> 




where 



Figure CI. The quantum circuit for constructing the state {ip) composed of 
8 qubits. The first part of the circuit constructs the 4 qubit state | A4} using a 
cascade of uniformly controlled rotations. The resulting state | A4} is a normalized 
superposition of each of the 2^ computational basis states with real amplitudes 
parameterized by the 15 angles ^o, • • • ,^14- These angles are chosen to be the 
Schmidt coefficients of the target state | ip) . The final part of the circuit performs 
a sequence of CNOT gates between the first 4 qubits and an additional 4 creating 
the canonical Schmidt form for | ip) . This circuit can be readily generalized to 
larger numbers of qubits. In particular the structure of the first part of the circuit 
is based on taking the previous k — 1 qubits in the state | A^-i), adding qubit k in 
the state | 0} and performing a further uniformly controlled rotation F^~^ • The 
resulting k qubits are then expanded to the state |Afc} and an additional 2^~^ 
angles are introduced into its parametrization. See [Appendix C| for more details. 



For example, when d = 1 this reduces to Aq = cos(|6>o) and Ai = sin(^6>o), while for 
d = 2 we have Aq = cos(^6>o) cos(^^i), Ai = cos(^^o) sin(^^i), A2 = sin(^^o) cos(^6>2), 
and A3 = sin(|6>o) sin(^^2)- This parametrization of coefficients naturally arises from a 
sequence of uniformly controlled rotations defined in [Appendix B[ The construction of 
a state | A^^) is then achieved by a cascade of uniformly controlled rotations, all around 
the 7/-axis, involving an incrementally increasing subset 1, • • • , /c of the d qubits as F^~^ 
giving a circuit FiF2F^ • • • F^~^ . In Fig. ICll the circuit building | A4) is shown. This 
figure also shows that as each successive qubit k is added it becomes entangled with 
the subset of k — 1 qubits in the state | Ak-i) previously rotated leaving an enlarged 
total state | A^) that is completely defined by the 2^ — 1 independent angles Oj. 
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